Rooting the CR48

Turn off the Cr-48. Make sure you have a pen nearby or this is going to be difficult.

Flip the Cr-48 over.

Remove the battery.

Right beside the battery contacts there is a small bit of black tape. Take the tape off.

There is a white switch under the tape. For user mode, the switch is away from the battery contacts. Use your pen to switch it towards the contacts.

Put the battery back in and start the machine. There’s an ominous message but you can hit CTRL+D to get past it. If you do nothing the device will eventually beep and start the process into developer mode.

The C-48 will wipe itself and replace the image with a developer copy. This takes 5-6 minutes.

You’ll need to go though the initial setup process again.

Once you get logged in, you can hit CTRL+ALT+T to get to the terminal.

While you can get to this shell in user mode, this terminal offers an extra command to use. To see all commands type “help”.

Type “shell” to drop to a full bash shell. You’ll be the special user named chronos.

Type “sudo su”

Rooted!

Now that you've rooted, you also need to make the root partition writable, and turn off boot verification.